Find the security servicesyour environment needs.

Asset management

Use Asset Inventory and Asset Discovery to review servers, containers, Kubernetes resources, software information and unmanaged assets.

• Security asset management
• Asset Inventory
• Asset Discovery
• Software Inventory
• Kubernetes
• Unmanaged assets
• CIA classification
• N2SF asset classification

Security categories to compareCAASM · EASM · ITAM · CMDB

Attack surface & paths

Use ASM and Attack Path Analysis to review exposed services, potential paths to critical assets and supporting evidence.

• ASM
• Attack surface management
• Attack Path Analysis
• Exposed assets
• Network Topology
• Service Dependency
• Path prioritization

Security categories to compareEASM · CAASM · CTEM · BAS

Real-time threat detection

Review eBPF runtime security in an IDS and HIDS context, with IOC, MITRE ATT&CK, correlation and execution, file and traffic evidence.

• Intrusion detection (IDS)
• Host-based detection (HIDS)
• Runtime Security
• eBPF
• IOC
• MITRE ATT&CK
• Event correlation
• File integrity (FIM)

Security categories to compareIDS · HIDS · NIDS · IPS · HIPS · EDR · NDR · CWPP

Investigation & work records

Connect incident evidence, approvals and response history through Incident Response and Case Management, separating receipts from follow-up observations.

• Incident Response
• Case Management
• Incident timeline
• Evidence management
• Process termination
• Traffic blocking
• Network isolation
• Approval workflow

Security categories to compareEDR · NDR · XDR · SIEM · SOAR · DFIR

Security configuration

Review KSPM and CIS Benchmark checks, including NetworkPolicy, Ingress TLS, Security Context and their application scope.

• KSPM
• CIS Benchmark
• NetworkPolicy
• Ingress TLS
• Security Context
• Privileged Container
• Root execution checks
• Linux Capabilities

Security categories to compareCSPM · KSPM · CWPP · CNAPP

Accounts & permissions

Review Kubernetes ServiceAccount NHI, RBAC, RoleBinding, ClusterRole and long-lived tokens through a least-privilege lens.

• NHI
• RBAC
• ServiceAccount
• RoleBinding
• ClusterRole
• ClusterRoleBinding
• Least privilege
• Long-lived tokens

Security categories to compareNHI · RBAC · IAM · CIEM

Vulnerability analysis

Analyze image and OS packages with SBOM, SCA and CycloneDX. Review CVE, CVSS, EPSS, CISA KEV, affected assets and fixed versions.

• SBOM
• SCA
• CycloneDX
• CVE
• CVSS
• EPSS
• CISA KEV
• CWE
• CPE
• PURL

Security categories to compareSCA · SBOM · SPDX · VEX · Vulnerability Management

Compliance & audit

Connect supported ISMS-P and CIS checks, remediation and rechecks through an Audit Trail and integrity-verifiable evidence packages.

• ISMS-P
• CIS
• Control Mapping
• Audit Trail
• Evidence Package
• Remediation & exceptions
• Rechecks
• SHA-256

Security categories to compareGRC · ISMS-P · N2SF · STIG · NIST · ISO 27001 · PCI DSS